Lines Matching full:packet

23 pcap-filter \- packet filter syntax
118 and destination addresses, and often contain Ethernet-like packet
154 True if the IPv4/v6 destination field of the packet is \fIhostnameaddr\fP,
157 True if the IPv4/v6 source field of the packet is \fIhostnameaddr\fP.
159 True if either the IPv4/v6 source or destination of the packet is \fIhostnameaddr\fP.
188 True if the packet used \fIhost\fP as a gateway.
205 True if the IPv4/v6 destination address of the packet has a network
218 True if the IPv4/v6 source address of the packet has a network
221 True if either the IPv4/v6 source or destination address of the packet has a network
232 True if the packet is IPv4/v6 TCP, UDP or SCTP and has a
245 True if the packet has a source port value of \fIportnamenum\fP.
247 True if either the source or destination port of the packet is \fIportnamenum\fP.
249 True if the packet is IPv4/v6 TCP, UDP or SCTP and has a
259 True if the packet has a source port value between \fIportnamenum1\fP and
262 True if either the source or destination port of the packet is between
274 True if the packet has a length less than or equal to \fIlength\fP.
282 True if the packet has a length greater than or equal to \fIlength\fP.
290 True if the packet is an IPv4 packet (see
323 True if the packet is an IPv6 packet of protocol type \fIprotocol\fP.
337 True if the packet is an IPv4 or IPv6 packet of protocol type
350 True if the packet is IPv6 packet,
360 matches any IPv6 packet with TCP protocol header in the protocol header chain.
361 The packet may contain, for example,
372 True if the packet is an IPv4 or IPv6 packet of protocol type
377 True if the packet is an Ethernet broadcast packet.
381 True if the packet is an IPv4 broadcast packet.
392 True if the packet is an Ethernet multicast packet.
397 True if the packet is an IPv4 multicast packet.
399 True if the packet is an IPv6 multicast packet.
401 True if the packet is of ether type \fIprotocol\fR.
419 0x000000, for encapsulated Ethernet; it doesn't check whether the packet
432 the filter checks for a SNAP-format packet with an OUI of 0x080007
446 for a SNAP-format packet as it does for FDDI, Token Ring, and 802.11;
490 True if the packet has an 802.2 LLC header.  This includes:
503 True if the packet has an 802.2 LLC header and has the specified
549 Packet was received by the host performing the capture rather than being
554 Packet was sent by the host performing the capture rather than being
559 True if the packet was logged via the specified interface (applies only to
562 True if the packet was logged as coming from the specified interface (applies
570 True if the packet was logged as matching the specified PF rule number
578 True if the packet was logged with the specified PF reason code.  The known
590 True if the packet was logged as matching the specified PF ruleset
599 True if the packet was logged as matching the specified PF rule number
608 True if PF took the specified action when the packet was logged.  Known actions
713 True if the packet is an IEEE 802.1Q VLAN packet.
714 If the optional \fIvlan_id\fR is specified, only true if the packet has the specified
718 the assumption that the packet is a VLAN packet.  The `\fBvlan
738 True if the packet is an MPLS packet.
739 If the optional \fIlabel_num\fR is specified, only true if the packet has the specified
743 the assumption that the packet is a MPLS-encapsulated IP packet.  The
764 True if the packet is a PPP-over-Ethernet Discovery packet (Ethernet
767 True if the packet is a PPP-over-Ethernet Session packet (Ethernet
769 If the optional \fIsession_id\fR is specified, only true if the packet has the specified
773 the assumption that the packet is a PPPoE session packet.
783 True if the packet is a Geneve packet (UDP port 6081). If the optional \fIvni\fR
784 is specified, only true if the packet has the specified \fIvni\fR.
787 the expression on the assumption that the packet is a Geneve packet.
799 True if the packet is an OSI packet of protocol type \fIprotocol\fP.
813 True if the packet is an ATM packet, for SunATM on Solaris, with a
817 True if the packet is an ATM packet, for SunATM on Solaris, with a
821 True if the packet is an ATM packet, for SunATM on Solaris, and is
822 an ATM LANE packet.
825 on the assumption that the packet is either a LANE emulated Ethernet
826 packet or a LANE LE Control packet.  If \fBlane\fR isn't specified, the
827 tests are done under the assumption that the packet is an
828 LLC-encapsulated packet.
830 True if the packet is an ATM packet, for SunATM on Solaris, and is
833 True if the packet is an ATM packet, for SunATM on Solaris, and is
836 True if the packet is an ATM packet, for SunATM on Solaris, and is
839 True if the packet is an ATM packet, for SunATM on Solaris, and is
842 True if the packet is an ATM packet, for SunATM on Solaris, and is
845 True if the packet is an ATM packet, for SunATM on Solaris, and is
848 True if the packet is an ATM packet, for SunATM on Solaris, and is
851 True if the packet is an ATM packet, for SunATM on Solaris, and is
854 True if the packet is an ATM packet, for SunATM on Solaris, and is
858 True if the packet is an ATM packet, for SunATM on Solaris, and is
886 a length operator, and special packet data
903 length of the packet.
905 To access data inside the packet, use the following syntax: